$ rpki-client -vvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: bB+RXwAvehjGm2UY2fo/ypfi/SSxedaeur+T7iYnYkI= Subject key identifier: E3:71:FC:8A:E1:D0:1F:38:94:84:4E:3B:1E:56:AB:21:0B:5A:B5:04 Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 045A3E143EF7569DD79F2E1972C8C36FE5C4E1EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:37:52 +0000 Manifest this update: Mon 20 Jul 2026 21:32:52 +0000 Manifest next update: Tue 21 Jul 2026 21:55:52 +0000 Files and hashes: 1: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: ZqTG9FIBz9A9nSXVcTbp5SH3Iu2pRGkefotrzTl6uZ0=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5a:3e:14:3e:f7:56:9d:d7:9f:2e:19:72:c8:c3:6f:e5:c4:e1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: Jul 20 21:32:52 2026 GMT Not After : Jul 21 21:55:52 2026 GMT Subject: CN=E371FC8AE1D01F3894844E3B1E56AB210B5AB504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:94:09:f2:de:c4:5b:2d:7c:ef:52:f4:d2: 2e:b3:dd:43:00:a8:93:aa:c8:eb:92:50:31:a8:2e: 55:b8:1e:93:78:13:cf:00:49:b7:56:d3:82:81:88: 2e:11:f1:10:4f:81:2b:a5:60:dc:71:0d:f5:5a:0a: ce:23:0c:f1:cb:15:0c:da:fc:ba:26:26:41:63:02: ce:6b:0e:a1:f0:aa:06:62:c6:a8:8b:81:ad:5d:7d: bb:f6:5f:c9:f2:56:bd:a8:08:08:a9:7a:40:4e:ff: 19:a5:cd:93:06:e9:c3:ba:fe:4f:bc:66:c4:9f:a1: 25:c7:8c:88:cc:f4:41:b1:fd:2e:23:3f:d6:b1:3c: 7f:9b:6e:d7:cb:fb:36:67:56:03:f7:c8:22:bb:71: ed:c0:95:b9:a2:cf:57:f6:cd:29:e2:28:6b:c6:f0: 93:ce:e7:39:fc:50:bd:98:0d:51:fd:dd:1c:93:e8: da:45:07:61:5f:ad:51:e2:7d:d3:e5:73:10:46:f4: 26:6a:e9:dd:e0:08:c9:bb:32:3a:01:98:9c:31:1c: 0d:f3:c2:61:a8:6d:10:7a:7e:1b:3f:28:a0:56:a6: 32:14:d4:34:ba:1b:1b:61:a5:a8:71:f2:b3:37:cb: d5:e8:de:10:57:93:32:66:e9:b9:88:ca:ee:26:21: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:71:FC:8A:E1:D0:1F:38:94:84:4E:3B:1E:56:AB:21:0B:5A:B5:04 X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f5:7e:94:2f:a9:91:39:ab:8d:bd:8a:28:31:25:1b:79:ff: de:ab:49:46:d4:10:17:43:cc:b6:74:dd:39:58:d2:d1:c8:18: 46:9e:42:0b:e0:1a:78:21:a6:55:58:d9:79:33:f3:48:be:b6: e1:be:45:a7:18:2a:1a:5f:ac:4e:8b:11:da:d8:af:c3:83:97: 7e:ee:ed:69:d5:64:e3:83:1f:4f:0c:49:16:9f:21:ec:c5:c0: df:3b:94:2c:91:4f:f7:53:ec:71:7b:e1:39:29:a9:ee:1e:ed: 57:1a:16:4e:4c:33:65:77:79:35:1e:7b:fa:66:fd:1a:2e:1e: 20:60:9f:67:1f:db:b1:45:ba:5a:28:f8:a7:95:de:51:ed:4f: b1:11:21:bc:92:5c:ed:f8:2d:bc:b0:9a:4e:5a:7f:b7:61:0d: 66:71:a2:ad:81:e0:b6:bc:f5:d0:9d:d6:19:f3:7a:b1:d0:50: 02:a6:d4:db:78:d3:64:59:57:9a:d4:ce:0e:fe:3e:cd:b1:ad: 8c:49:1f:ee:97:10:f1:20:08:27:21:4a:04:4f:c7:5a:2a:64: f1:c5:98:37:c6:9a:86:eb:26:45:ae:51:36:82:8f:68:40:72: 84:4f:44:34:03:51:fb:10:dd:73:6a:ea:3e:5f:8c:86:b3:d4: c9:16:05:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFo+FD73Vp3Xny4ZcsjDb+XE4e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjA3MjAyMTMyNTJaFw0yNjA3MjEyMTU1NTJaMDMxMTAvBgNV BAMTKEUzNzFGQzhBRTFEMDFGMzg5NDg0NEUzQjFFNTZBQjIxMEI1QUI1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA75QJ8t7EWy1871L00i6z3UMA qJOqyOuSUDGoLlW4HpN4E88ASbdW04KBiC4R8RBPgSulYNxxDfVaCs4jDPHLFQza /LomJkFjAs5rDqHwqgZixqiLga1dfbv2X8nyVr2oCAipekBO/xmlzZMG6cO6/k+8 ZsSfoSXHjIjM9EGx/S4jP9axPH+bbtfL+zZnVgP3yCK7ce3Albmiz1f2zSniKGvG 8JPO5zn8UL2YDVH93RyT6NpFB2FfrVHifdPlcxBG9CZq6d3gCMm7MjoBmJwxHA3z wmGobRB6fhs/KKBWpjIU1DS6Gxthpahx8rM3y9Xo3hBXkzJm6bmIyu4mIUv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU43H8iuHQHziUhE47HlarIQtatQQwHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT1fpQvqZE5q429iigxJRt5/96rSUbUEBdD zLZ03TlY0tHIGEaeQgvgGnghplVY2Xkz80i+tuG+RacYKhpfrE6LEdrYr8ODl37u 7WnVZOODH08MSRafIezFwN87lCyRT/dT7HF74Tkpqe4e7VcaFk5MM2V3eTUee/pm /RouHiBgn2cf27FFuloo+KeV3lHtT7ERIbySXO34Lbywmk5af7dhDWZxoq2B4La8 9dCd1hnzerHQUAKm1Nt402RZV5rUzg7+Ps2xrYxJH+6XEPEgCCchSgRPx1oqZPHF mDfGmobrJkWuUTaCj2hAcoRPRDQDUfsQ3XNq6j5fjIaz1MkWBQc= -----END CERTIFICATE-----Generated at Tue Jul 21 08:50:50 2026 by rpki-client